last executing test programs: 3m59.494421282s ago: executing program 4 (id=3497): mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x5, 0x61e, [0x200000000040, 0x0, 0x0, 0x20000000014e, 0x20000000029c], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x892f, 'team0\x00', 'hsr0\x00', 'pimreg\x00', 'lo\x00', @remote, [0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x9, 0x4, 0x8917, 'hsr0\x00', 'batadv_slave_0\x00', 'pimreg1\x00', 'veth1_virt_wifi\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [], 0x6e, 0xa6, 0x11e, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffc}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x400, 0xa, 0x1, 0x0, "e6d3442ab773d4f3ae2d4642246e146c5846f1300400b4e8aff096ab7cf20b0f10b73e7a24d3eaae23859bd52045a8a856aef32d6339bfc9b9c71f1073ac7898"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x41, 0xf7, 'veth1_to_bond\x00', 'team0\x00', 'wlan1\x00', 'bridge0\x00', @empty, [0xff, 0xff, 0xff, 0xff], @random="876685630a79", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x8}}}], [], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x31, 0x8cdd, 'veth0_to_bridge\x00', 'veth0_to_bridge\x00', 'veth0_to_batadv\x00', 'wg0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xfe, 0x16e, 0x1a6, [@limit={{'limit\x00', 0x0, 0x20}, {{0xb, 0x4, 0x9, 0x5, 0x6, 0x6}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0xfffffff0, 0x3, 0x8, 0x2, 0x2, 0x3}}}], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @common=@mark={'mark\x00', 0x10, {{0x30, 0xffffffffffffffff}}}}, {0x9, 0x1, 0x5, 'veth1\x00', 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'pim6reg0\x00', @broadcast, [0xff], @broadcast, [0xff, 0xff, 0x0, 0xff], 0x6e, 0xb6, 0xe6, [], [@common=@ERROR={'ERROR\x00', 0x20, {"5e05745e1c6bafe75ec4a1ce0f6aa4c2553e7b4de26591112e92e1b0cd9c"}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}]}, 0x696) 3m59.477405035s ago: executing program 4 (id=3498): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa2aaaaac772528a7e77845d86dd60ff00f500140600fee06f79cb853d8219000000000000aa35fd8bf0ff7f00000000000000000001000000000000000000000000000000f84562166b4c641c92ec8b561985cb332930e9d475b5a95cdbdec174bb626707f324e3f40cc3b27fe8d9"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="f4ff000010000100000000000000000000fd000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a3000000093901eca2650b12fa88186351353010008000540000000218c0111800b00010074617267657400007c01028004"], 0x210}}, 0x800) 3m59.222389521s ago: executing program 4 (id=3502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) 3m59.144125428s ago: executing program 4 (id=3504): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (fail_nth: 2) 3m58.920266725s ago: executing program 4 (id=3509): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x138, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) getpeername$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) 3m58.338720479s ago: executing program 4 (id=3515): r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast1, 0x10}, 0x1c) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) 3m42.994919903s ago: executing program 32 (id=3515): r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast1, 0x10}, 0x1c) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) 2m34.196197256s ago: executing program 0 (id=4314): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 2m34.081409523s ago: executing program 0 (id=4316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) 2m33.931534089s ago: executing program 0 (id=4319): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048080}, 0x4051) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x38c, r1, 0x80, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe562}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x1b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4d75dacdd65fe26103360425a5674ce5e7eefe32e6d4aae161e3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb151}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "be9a27be83ef25195c7dd302a36588e9689f550defc15454b97d90b303b433f7fe36fa5507222933353c3c452558c7511b18a262e4eaf177495c6aaee429b038916bbc279bc07d82919a5558aa755db2327e5c7f2771dc7b3e86e3ad85851272fa1d37a05b9909ae6eebb26c78e293c42d1a5764e79e239c78fc4c9f5fd599918119034ef63d04e8e65c5b43cd989fe583789a9535bc3501eb3eb0f8dd64e8417bc48a284f73e42f6b5eb0e76a75d69e60c6036e36185eea5f17fa3d9d35d144f5c89409f9e0336ade4eb1e099cf326b95cd0bb013e094f757dc82e83204c518eac5725286fde4bbcfa5250a839e3711b1cad02f93c70e54f2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "36d8cfd221b8dcd3c3c28208c0aa8f369b3c233b2f2f21afbf64b75c21a1"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb0e9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21880000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c53}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x2004010}, 0x8001) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 2m33.776476751s ago: executing program 0 (id=4322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0x1}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000000c0), &(0x7f0000000280)='%+9llu \x00'}, 0x20) 2m33.634405041s ago: executing program 0 (id=4324): mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x100000000000000, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2m33.614665578s ago: executing program 0 (id=4325): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {&(0x7f0000000140)="f878abaee5d8e938dc5dfedbbaf96913b77e0fe4d096", 0x16}], 0x2, &(0x7f0000000380), 0x0, 0x80}, 0x40844) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=r9, @ANYBLOB="10005a800c00008004000100040003"], 0x2c}}, 0x0) 2m18.430642909s ago: executing program 33 (id=4325): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {&(0x7f0000000140)="f878abaee5d8e938dc5dfedbbaf96913b77e0fe4d096", 0x16}], 0x2, &(0x7f0000000380), 0x0, 0x80}, 0x40844) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=r9, @ANYBLOB="10005a800c00008004000100040003"], 0x2c}}, 0x0) 1m52.397686117s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 1m48.680330005s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1m48.098096813s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 1m32.672402606s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 1m26.482850158s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1m25.466400715s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 1m13.98496408s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 1m5.301096148s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 1m4.491754566s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 52.081872895s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 44.483956252s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 43.266601202s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 32.131657614s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 27.511649442s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 25.544729119s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 12.322173266s ago: executing program 2 (id=3819): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) vmsplice(r0, &(0x7f0000000440), 0x0, 0x1) write(r1, &(0x7f0000000300)="6a8b63bd33", 0x5) 10.757160693s ago: executing program 5 (id=4206): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000071000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) 9.044142085s ago: executing program 1 (id=3582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x534, 0x37, 0x400, 0x70bd2c, 0x25dfdbfc, {0x6}, [@nested={0x26e, 0xda, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="ace65780e9db117c412544950124388d667f6a7aeff1c9f07b431ec562fa233ea77e997e97a9224860181078731ca93ee4cc55a31336f8fd86ae76c1b64523f5b1d888e662b6c959688109e9c1768db0677b57c73d8cece2bb7e10d7c3ec239d7c91743dab59f9fb2951c0d613a879bf09c5e20a1117f9ba452bff7d05cd2ddb952c7801c905c1d1620df1239d7c562e60713b4259a9814741dea0", @generic="22ec042249c8f91318b5f81e7a8ed11d3fad88f68a33ab162c8e608a3d612fe4441e58c1999bf3e87ed4aa1b43db86c1e2e48a0c57cdc83e2e71ae9a2754a9e8134ae1f2a75867af5c1f781dad09a7abf8a3fafc748ec8cb65091dc43673e61f993d8c722a60013545491b313f84236dbfa9f79657f9c78be982de2e15c2bd0a892347c8009662ab344b58c8845120c464175f1247f1f2694c0fbfe43c8c9de1bcaaa97f2db46d55ed1a347b955b45ee7a441d0927cc0a56acdfccd544e37827892eebd2139086df3d2f353f30c11489905f99fdd64ff2", @generic="1252a90786660860f7436ab8c8a11ebca29f304ec3a6a83c9227ec578aa3e0987b551688ee976b189cd5cadbab448ee1e5e18ebb2756e1fdd9e3e879b4a0fb2c1125049d2e807809f9aacf510d152facf3c65e01579e055ac0aceffa171ea0be645b9bcecad732e872e9f99bf80f2e5e21132e02151f89180dea4a56f6b510d9423057d58fe4c2eb0957dd6b1d3cb5a9f1812832a1b50c60173f28e7fdeee046ac39122f6c25f35b9fdbfd5c8258b06b61ef42904ea13d1fc25e678e1b00ae601b931c040f63c89ddec5a87579b4bfedd3adb04adc8a66b71fc2ff623b20b15353e03af00bff8a272b748910a71bd3ee", @nested={0x4, 0x144}]}, @typed={0xe2, 0xbe, 0x0, 0x0, @binary="337b6df814e39d0923cb1d2430a5ec2c4ce77deec09fa56a1961e794e79c5a141b0d4f0d54fd481a843ed8fe7b48d294f39c076798264960f6b951a84af35d8e4e2094d2ae9b257dd1fb1746a84082cedcb4e06906cf74d8f34364cf84799a8639aeb9ffd8ef03cb567f394b2106925aad2c52447a576f3cc20820d9370c8d3a57b244690f6b08f8bdbe29f3ce924be2948b88814aca15342ee25716e6d46421b1db1bd07bc28a61f01499f04e097d67f7a8c59bb1ca5e068944eb7862eb1e1169b7ce3d7720277dc99cc3af0806c39a53537041dfbeddb10a20976975c8"}, @generic="8069cd8592655e5ecaa881bd826e519b919eb11c1ad4285091d4fcb8aeecaeaeb69b2781f6a52656204f264a25246ed74524a28246af68fee1da4e6b590154d3dcdad3210074a6d60e2cba633ce717a6ba33c91d5e68b70088aa33a5a78423e6a5c85c8990b8cdda38aa8d5b649d132e0f9fad7727d9827e4e0838c639947c8287c372140941070b77c10cc27390385cdf716b58e2de6dd1", @nested={0x2c, 0x102, 0x0, 0x1, [@nested={0x4, 0x36}, @typed={0x4, 0x4d}, @nested={0x4, 0x151}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x7, 0xa2, 0x0, 0x0, @str='}^\x00'}, @generic="66955f38d4b444719f7b6792bee30b801ae49b6147f617bbd5183b2826f6916138ae749dadbfdd120504ba290ee22c9bb5b6bab7368adcfa7f2304e016b0e9d64375badfa2f702058bd8711b07682081e8aff05a01bf83dfde5de4f94087feca4a7d594fa7aa2aaf8b483f889c7ed07d2cd7f4e3302e63a2dc47160306", @generic="0947bee586b4fe59b26bcad32df716482479f3ea972f3737171d4907005c9d7094483167ccaca9cd8f33bd8dac17771fc4f14688367f3b38983fafa361d4f7056222411bfbce6385ca8a669ed04ed71c6bee278cbecc9b2b4bce8685b3b6fcd03dc6d85a27b09091f32ee524ae683a4145bbedd1e3a484c5ac", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r1}]}, 0x534}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x2b}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1.590280405s ago: executing program 6 (id=5095): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x3e}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)=ANY=[@ANYBLOB='H\x00', @ANYRES8=r1, @ANYBLOB="010000000000000000000800000018000180140002"], 0x48}}, 0x8040) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.215547711s ago: executing program 6 (id=5096): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b00010069703667726500003000028014000700200100"/48], 0x8c}}, 0x0) 1.094662774s ago: executing program 3 (id=5097): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d618008000510000000000000000000795393429e8e799b30c856e2f189ff3b76e757875b502df5f74ad54a715064bd81f6cd", @ANYRES32=r1, @ANYBLOB="0800040044000000"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0600002ad1e148b0fb", @ANYRES16=r3, @ANYBLOB="020028bd7000fcdbdf25040000001c0006800400020004000200040002000800060003000000040005003000018024000280080002000900000008000300ff030000080004000e060000080001002000000008000300190900001800048014000780080001001d00000008000100000000000c00098008000100020000000c0005800800010075647000"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 979.971339ms ago: executing program 6 (id=5098): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x20000050) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendto$netrom(r0, &(0x7f0000000480)="2ccc70b61440c971c60aa0d45a4e958e5c8f57aa6b1d2985eb766f425f7b04dd1e53c1bcb055768719bcfb39394d66c8f492619a1bd968c937ea543b01b120ba7890f9ba435f0467760ff1221cdf68e5159b2e53286ac82f09a386e442f78df5ccc74365fd9eec1304ea192854ab58f4de4fa55052727353c22f8b54be294189edc0c8ae853f0f9d62b6a82c861238288046f66878b0237639778cca7e95ba89c43cd81e052bd6c46894c20905dd2ea1ca5df74f3692b428e89c199e9e94e4ec869574b6bceab72c7bbb7d6eb7f4083e6c1db234b0c192def70617a1", 0xdc, 0x4000, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 890.402826ms ago: executing program 3 (id=5099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010024000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 777.720239ms ago: executing program 3 (id=5100): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x4) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x121, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x24}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x181}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x8e, 0xc, 0xfffffff6, 0x0, @loopback, @mcast2, 0x7, 0x40, 0xdbd, 0x800}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="180000004cae000000000000db67d46c18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000aa09000000000000550901000000deff940000000000000085100000fbffffff8179e0ff1000000018440000fcffffff000000000000000018320000030000000000000000000000bf91000000000000b702000001000000850b000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8000, 0xe7, &(0x7f00000003c0)=""/231, 0x41000, 0x6, '\x00', r6, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000004c0)=[0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x2, 0x4, 0x6}, {0x4, 0x1, 0x5, 0x2f7e07a50d97f0e}, {0x3, 0x5, 0x4, 0xa}, {0x0, 0x4, 0xd}, {0x3, 0x5, 0x10, 0xa}], 0x10, 0x1ff}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r12, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r9, r10}, 0xc) (rerun: 64) 610.994749ms ago: executing program 3 (id=5101): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) socket(0x1d, 0x2, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x11, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$x25(r0, &(0x7f0000000280)=""/139, 0x8b, 0x40000100, 0x0, 0x0) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) 530.250878ms ago: executing program 6 (id=5102): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x7fff, 0x4) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510029fc020000000000000000000000000001fe8000000000000000000000000000aa84"], 0x0) 298.667111ms ago: executing program 3 (id=5103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x6000, 0x0, 0x4a044}, 0x4010) 298.018811ms ago: executing program 6 (id=5104): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f00000002c0)='GPL\x00', 0x7f, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011"], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600800000206050000000000000000000000000005000400000000000900020073797a320000070205000100070000000508f6ff09000000140007800800114000000000050015000505000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x840) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @local}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2b, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x41}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x85}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xb0c40557f6587ecc, 0x9, 0x1, 0x30, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$can_bcm(r7, &(0x7f0000000040), 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x30, r11, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20046010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 25.926742ms ago: executing program 6 (id=5105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x40800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) accept(r4, 0x0, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r5, 0x153ff25051509283, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x0, 0x21}, {0x9, 0x26}, {0xfa, 0x2}, {0x6, 0x3}], "eae33303d91f84ff"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x10000000) 0s ago: executing program 3 (id=5106): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x3e}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)=ANY=[@ANYBLOB='H\x00', @ANYRES8=r1, @ANYBLOB="010000000000000000000800000018000180140002"], 0x48}}, 0x8040) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) kernel console output (not intermixed with test programs): 452.412096][T19116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.479086][T19116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.515275][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4638'. [ 452.530806][T19116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.576481][T19116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.982436][ T5853] Bluetooth: hci0: command tx timeout [ 453.014039][T19299] sctp: [Deprecated]: syz.3.4643 (pid 19299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.014039][T19299] Use struct sctp_sack_info instead [ 453.039488][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4644'. [ 453.071339][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4644'. [ 453.274710][ T5853] Bluetooth: hci4: command tx timeout [ 453.306107][T14720] hsr_slave_0: left promiscuous mode [ 453.319294][T14720] hsr_slave_1: left promiscuous mode [ 453.326017][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.334129][T14720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.342209][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.351049][T14720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.401917][T14720] veth1_macvtap: left promiscuous mode [ 453.407658][T14720] veth0_macvtap: left promiscuous mode [ 453.419918][T14720] veth1_vlan: left promiscuous mode [ 453.427503][T14720] veth0_vlan: left promiscuous mode [ 453.434206][T19315] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4648'. [ 453.753074][ T5853] Bluetooth: hci5: command tx timeout [ 453.876353][T14720] team0 (unregistering): Port device team_slave_1 removed [ 453.922406][T14720] team0 (unregistering): Port device team_slave_0 removed [ 454.318809][T19310] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 454.335796][T19315] gretap0: entered promiscuous mode [ 454.363146][T19237] chnl_net:caif_netlink_parms(): no params data found [ 454.409988][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 454.761985][T19332] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4654'. [ 454.800486][T19237] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.833011][T19237] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.843096][T19237] bridge_slave_0: entered allmulticast mode [ 454.880776][T19237] bridge_slave_0: entered promiscuous mode [ 454.909000][T19237] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.931640][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4656'. [ 454.941219][T19237] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.949160][T19237] bridge_slave_1: entered allmulticast mode [ 454.958174][T19237] bridge_slave_1: entered promiscuous mode [ 454.968527][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4656'. [ 454.989505][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.002308][T19244] chnl_net:caif_netlink_parms(): no params data found [ 455.033652][ T5853] Bluetooth: hci0: command tx timeout [ 455.079286][T19237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.119337][T19237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.338285][T19237] team0: Port device team_slave_0 added [ 455.411544][T19237] team0: Port device team_slave_1 added [ 455.486000][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.576390][T19237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.600171][T19237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.655354][T19237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.667415][T19244] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.679327][T19244] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.687919][T19244] bridge_slave_0: entered allmulticast mode [ 455.696025][T19244] bridge_slave_0: entered promiscuous mode [ 455.707636][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.714802][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.740721][T19237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.756717][T19237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.758119][T19369] netlink: 'syz.3.4667': attribute type 9 has an invalid length. [ 455.790940][T19237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.825134][T19244] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.832290][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.840450][ T5853] Bluetooth: hci5: command tx timeout [ 455.847606][T19244] bridge_slave_1: entered allmulticast mode [ 455.858395][T19244] bridge_slave_1: entered promiscuous mode [ 455.906624][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 455.944088][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.951259][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.978652][T19369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.979419][T19369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4667'. [ 455.987254][T19373] FAULT_INJECTION: forcing a failure. [ 455.987254][T19373] name failslab, interval 1, probability 0, space 0, times 0 [ 456.030025][T19373] CPU: 1 UID: 0 PID: 19373 Comm: syz.6.4669 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 456.030050][T19373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.030062][T19373] Call Trace: [ 456.030070][T19373] [ 456.030078][T19373] dump_stack_lvl+0x189/0x250 [ 456.030106][T19373] ? __pfx____ratelimit+0x10/0x10 [ 456.030129][T19373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.030151][T19373] ? __pfx__printk+0x10/0x10 [ 456.030176][T19373] ? __pfx___might_resched+0x10/0x10 [ 456.030204][T19373] should_fail_ex+0x414/0x560 [ 456.030232][T19373] should_failslab+0xa8/0x100 [ 456.030253][T19373] __kmalloc_noprof+0xcb/0x4f0 [ 456.030267][T19373] ? __kasan_kmalloc+0x93/0xb0 [ 456.030281][T19373] ? nla_strdup+0x9d/0x140 [ 456.030306][T19373] nla_strdup+0x9d/0x140 [ 456.030330][T19373] nf_tables_newtable+0x491/0x1890 [ 456.030349][T19373] ? nfnetlink_subsys_unregister+0x161/0x1b0 [ 456.030388][T19373] nfnetlink_rcv+0x1132/0x2520 [ 456.030441][T19373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 456.030478][T19373] ? ref_tracker_free+0x63a/0x7d0 [ 456.030526][T19373] ? __netlink_deliver_tap+0x807/0x850 [ 456.030554][T19373] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.030571][T19373] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.030594][T19373] netlink_unicast+0x758/0x8d0 [ 456.030621][T19373] netlink_sendmsg+0x805/0xb30 [ 456.030650][T19373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.030673][T19373] ? aa_sock_msg_perm+0x94/0x160 [ 456.030697][T19373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.030717][T19373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.030737][T19373] __sock_sendmsg+0x219/0x270 [ 456.030764][T19373] ____sys_sendmsg+0x505/0x830 [ 456.030791][T19373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.030822][T19373] ? import_iovec+0x74/0xa0 [ 456.030844][T19373] ___sys_sendmsg+0x21f/0x2a0 [ 456.030867][T19373] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.030967][T19373] ? __fget_files+0x2a/0x420 [ 456.030984][T19373] ? __fget_files+0x3a0/0x420 [ 456.031013][T19373] __x64_sys_sendmsg+0x19b/0x260 [ 456.031037][T19373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.031068][T19373] ? __pfx_ksys_write+0x10/0x10 [ 456.031083][T19373] ? rcu_is_watching+0x15/0xb0 [ 456.031112][T19373] ? do_syscall_64+0xbe/0x3b0 [ 456.031133][T19373] do_syscall_64+0xfa/0x3b0 [ 456.031148][T19373] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.031170][T19373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.031188][T19373] ? clear_bhb_loop+0x60/0xb0 [ 456.031207][T19373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.031224][T19373] RIP: 0033:0x7fc79e78e929 [ 456.031240][T19373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.031255][T19373] RSP: 002b:00007fc79f68d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.031274][T19373] RAX: ffffffffffffffda RBX: 00007fc79e9b5fa0 RCX: 00007fc79e78e929 [ 456.031287][T19373] RDX: 0000000000008880 RSI: 00002000000000c0 RDI: 0000000000000003 [ 456.031298][T19373] RBP: 00007fc79f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 456.031309][T19373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.031320][T19373] R13: 0000000000000000 R14: 00007fc79e9b5fa0 R15: 00007ffc961b52d8 [ 456.031349][T19373] [ 456.355334][T14720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.495029][T19116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.506778][T19116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.545980][T19244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.559628][T19244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.720429][T14720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.759654][T19237] hsr_slave_0: entered promiscuous mode [ 456.768865][T19237] hsr_slave_1: entered promiscuous mode [ 456.775515][T19237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.783847][T19237] Cannot create hsr debugfs directory [ 456.822243][T14720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.984604][T14720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.113565][ T5853] Bluetooth: hci0: command tx timeout [ 457.135161][T19244] team0: Port device team_slave_0 added [ 457.144238][T19399] netlink: 'syz.6.4678': attribute type 23 has an invalid length. [ 457.215641][T19244] team0: Port device team_slave_1 added [ 457.370755][T19244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.380785][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.409011][T19244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.420413][T19403] netlink: 'syz.6.4679': attribute type 10 has an invalid length. [ 457.432976][T19244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.448915][T19244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.478175][T19244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.500826][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.540928][T19403] team0: Port device geneve0 added [ 457.615650][T19402] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.666070][T19410] netlink: 'syz.3.4682': attribute type 4 has an invalid length. [ 457.773619][T19402] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.861424][T19244] hsr_slave_0: entered promiscuous mode [ 457.875270][T19244] hsr_slave_1: entered promiscuous mode [ 457.881614][T19244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.891837][T19244] Cannot create hsr debugfs directory [ 457.913743][ T5853] Bluetooth: hci5: command tx timeout [ 457.960542][T19402] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.009623][T19415] netlink: 'syz.3.4684': attribute type 33 has an invalid length. [ 458.041348][T14720] bridge_slave_1: left allmulticast mode [ 458.050303][T14720] bridge_slave_1: left promiscuous mode [ 458.056320][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.069102][T14720] bridge_slave_0: left allmulticast mode [ 458.095382][T19417] __nla_validate_parse: 2 callbacks suppressed [ 458.095397][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4685'. [ 458.095533][T14720] bridge_slave_0: left promiscuous mode [ 458.122596][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.539280][T14720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.551488][T14720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.562127][T14720] bond0 (unregistering): Released all slaves [ 458.675613][T19402] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.807364][T19116] veth0_vlan: entered promiscuous mode [ 458.918963][T19116] veth1_vlan: entered promiscuous mode [ 458.968822][T19402] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.011418][T19402] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.049972][T19402] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.174553][T19402] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.192952][ T5853] Bluetooth: hci0: command tx timeout [ 459.267981][T19116] veth0_macvtap: entered promiscuous mode [ 459.310442][T19116] veth1_macvtap: entered promiscuous mode [ 459.590542][T19443] syz.3.4695 (19443) used greatest stack depth: 17992 bytes left [ 459.608936][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.657491][T14720] hsr_slave_0: left promiscuous mode [ 459.669010][T14720] hsr_slave_1: left promiscuous mode [ 459.694521][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.702198][T14720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.723728][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.731812][T14720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.792385][T14720] veth1_macvtap: left promiscuous mode [ 459.798581][T14720] veth0_macvtap: left promiscuous mode [ 459.807946][T14720] veth1_vlan: left promiscuous mode [ 459.813682][T14720] veth0_vlan: left promiscuous mode [ 459.829860][T19463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.003191][ T5853] Bluetooth: hci5: command tx timeout [ 460.226834][T14720] team0 (unregistering): Port device team_slave_1 removed [ 460.266669][T14720] team0 (unregistering): Port device team_slave_0 removed [ 460.650489][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.701300][T19116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.724479][T19116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.733702][T19116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.742411][T19116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.069877][T14717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.098814][T14717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.180237][T19478] erspan0: entered allmulticast mode [ 461.267330][T19481] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4706'. [ 461.297085][T19244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 461.306952][T19481] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 461.328935][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4706'. [ 461.332067][T19244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.351068][T19484] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 461.376311][T14722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.400146][T14722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.436897][T19244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 461.470889][T19244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.565508][T19489] netlink: 'syz.6.4709': attribute type 4 has an invalid length. [ 461.728649][T19237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.865641][T14722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.923899][T19237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.947097][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 462.010440][T14722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.043030][T19237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.061971][T19237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.080730][ T5853] Bluetooth: hci5: command tx timeout [ 462.134707][T14722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.272231][T14722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.296099][T19244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.347891][T19244] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.371961][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.379146][T14720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.403983][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.411104][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.428555][T19237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.564033][T19237] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.610002][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.617183][T14720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.691033][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.698217][T14720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.708549][T14722] bridge_slave_1: left allmulticast mode [ 462.723027][T14722] bridge_slave_1: left promiscuous mode [ 462.728772][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.764635][T14722] bridge_slave_0: left allmulticast mode [ 462.770300][T14722] bridge_slave_0: left promiscuous mode [ 462.790760][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.523187][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.553300][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.574560][T19550] netlink: 'syz.6.4721': attribute type 1 has an invalid length. [ 463.588408][T14722] bond0 (unregistering): Released all slaves [ 463.593193][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.604643][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.615059][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.629661][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.636177][T19550] xt_hashlimit: max too large, truncated to 1048576 [ 463.645099][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.173693][T19244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.671455][T19591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4729'. [ 464.746868][T19591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4729'. [ 464.907238][T19237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.282471][T19609] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 465.497448][T14722] hsr_slave_0: left promiscuous mode [ 465.524698][T14722] hsr_slave_1: left promiscuous mode [ 465.545620][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.583205][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.619510][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.659812][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.679338][ T5853] Bluetooth: hci4: command tx timeout [ 465.708697][T14722] veth1_macvtap: left promiscuous mode [ 465.714336][T14722] veth0_macvtap: left promiscuous mode [ 465.720018][T14722] veth1_vlan: left promiscuous mode [ 465.726393][T14722] veth0_vlan: left promiscuous mode [ 466.283018][T14722] team0 (unregistering): Port device team_slave_1 removed [ 466.322028][T14722] team0 (unregistering): Port device team_slave_0 removed [ 466.777348][T19244] veth0_vlan: entered promiscuous mode [ 466.844599][T19237] veth0_vlan: entered promiscuous mode [ 467.035727][T19237] veth1_vlan: entered promiscuous mode [ 467.046678][T19244] veth1_vlan: entered promiscuous mode [ 467.150001][T19551] chnl_net:caif_netlink_parms(): no params data found [ 467.207735][T19244] veth0_macvtap: entered promiscuous mode [ 467.276102][T19237] veth0_macvtap: entered promiscuous mode [ 467.286923][T19244] veth1_macvtap: entered promiscuous mode [ 467.318828][T19237] veth1_macvtap: entered promiscuous mode [ 467.430644][T19551] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.438466][T19551] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.448464][T19551] bridge_slave_0: entered allmulticast mode [ 467.457419][T19551] bridge_slave_0: entered promiscuous mode [ 467.470284][T19551] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.477719][T19551] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.485428][T19551] bridge_slave_1: entered allmulticast mode [ 467.493376][T19551] bridge_slave_1: entered promiscuous mode [ 467.595191][T19551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.626635][T19244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.640932][T19551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.723782][T19244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.736480][T19237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.755438][ T5853] Bluetooth: hci4: command tx timeout [ 467.796262][T19551] team0: Port device team_slave_0 added [ 467.811590][T19244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.869752][T19244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.892932][T19244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.901655][T19244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.911770][T19666] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4744'. [ 467.921859][T19237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.925392][T19237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.964780][T19237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.982732][T19237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.991444][T19237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.032752][T19551] team0: Port device team_slave_1 added [ 468.150522][T19682] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 468.206933][T19551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.223379][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.267338][T19551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.294086][T19551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.305842][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.407008][T19551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.693694][T19551] hsr_slave_0: entered promiscuous mode [ 468.700314][T19551] hsr_slave_1: entered promiscuous mode [ 468.715348][T19551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.727728][T19551] Cannot create hsr debugfs directory [ 468.788257][T19707] FAULT_INJECTION: forcing a failure. [ 468.788257][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 468.836813][T19707] CPU: 0 UID: 0 PID: 19707 Comm: syz.6.4753 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 468.836837][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.836848][T19707] Call Trace: [ 468.836856][T19707] [ 468.836864][T19707] dump_stack_lvl+0x189/0x250 [ 468.836893][T19707] ? __pfx____ratelimit+0x10/0x10 [ 468.836918][T19707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.836941][T19707] ? __pfx__printk+0x10/0x10 [ 468.836966][T19707] ? __pfx___might_resched+0x10/0x10 [ 468.836994][T19707] should_fail_ex+0x414/0x560 [ 468.837020][T19707] should_failslab+0xa8/0x100 [ 468.837040][T19707] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 468.837059][T19707] ? __get_vm_area_node+0x13f/0x300 [ 468.837079][T19707] __get_vm_area_node+0x13f/0x300 [ 468.837101][T19707] __vmalloc_node_range_noprof+0x301/0x12f0 [ 468.837121][T19707] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 468.837145][T19707] ? is_bpf_text_address+0x26/0x2b0 [ 468.837194][T19707] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 468.837211][T19707] ? __might_fault+0xb0/0x130 [ 468.837225][T19707] ? __pfx_aa_get_newest_label+0x10/0x10 [ 468.837243][T19707] ? _parse_integer_limit+0x1ae/0x1f0 [ 468.837268][T19707] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 468.837287][T19707] __vmalloc_noprof+0xb1/0xf0 [ 468.837304][T19707] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 468.837328][T19707] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 468.837353][T19707] bpf_prog_alloc+0x3c/0x1a0 [ 468.837375][T19707] bpf_prog_load+0x735/0x1930 [ 468.837407][T19707] ? __pfx_bpf_prog_load+0x10/0x10 [ 468.837449][T19707] ? bpf_lsm_bpf+0x9/0x20 [ 468.837463][T19707] ? security_bpf+0x7e/0x300 [ 468.837485][T19707] __sys_bpf+0x5f1/0x860 [ 468.837508][T19707] ? __pfx___sys_bpf+0x10/0x10 [ 468.837542][T19707] ? ksys_write+0x22a/0x250 [ 468.837562][T19707] ? __pfx_ksys_write+0x10/0x10 [ 468.837575][T19707] ? rcu_is_watching+0x15/0xb0 [ 468.837604][T19707] __x64_sys_bpf+0x7c/0x90 [ 468.837624][T19707] do_syscall_64+0xfa/0x3b0 [ 468.837638][T19707] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.837658][T19707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.837673][T19707] ? clear_bhb_loop+0x60/0xb0 [ 468.837693][T19707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.837708][T19707] RIP: 0033:0x7fc79e78e929 [ 468.837729][T19707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.837742][T19707] RSP: 002b:00007fc79f68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.837760][T19707] RAX: ffffffffffffffda RBX: 00007fc79e9b5fa0 RCX: 00007fc79e78e929 [ 468.837772][T19707] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 468.837784][T19707] RBP: 00007fc79f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 468.837795][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.837804][T19707] R13: 0000000000000000 R14: 00007fc79e9b5fa0 R15: 00007ffc961b52d8 [ 468.837830][T19707] [ 468.838828][T19707] syz.6.4753: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.158520][T19707] CPU: 0 UID: 0 PID: 19707 Comm: syz.6.4753 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 469.158544][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.158555][T19707] Call Trace: [ 469.158562][T19707] [ 469.158569][T19707] dump_stack_lvl+0x189/0x250 [ 469.158600][T19707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.158623][T19707] ? __pfx__printk+0x10/0x10 [ 469.158641][T19707] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 469.158666][T19707] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 469.158686][T19707] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 469.158707][T19707] warn_alloc+0x214/0x310 [ 469.158738][T19707] ? __pfx_warn_alloc+0x10/0x10 [ 469.158757][T19707] ? __get_vm_area_node+0x13f/0x300 [ 469.158777][T19707] ? __get_vm_area_node+0x2b5/0x300 [ 469.158800][T19707] __vmalloc_node_range_noprof+0x326/0x12f0 [ 469.158820][T19707] ? is_bpf_text_address+0x26/0x2b0 [ 469.158867][T19707] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.158884][T19707] ? __might_fault+0xb0/0x130 [ 469.158898][T19707] ? __pfx_aa_get_newest_label+0x10/0x10 [ 469.158920][T19707] ? _parse_integer_limit+0x1ae/0x1f0 [ 469.158952][T19707] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 469.158972][T19707] __vmalloc_noprof+0xb1/0xf0 [ 469.158991][T19707] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 469.159015][T19707] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 469.159040][T19707] bpf_prog_alloc+0x3c/0x1a0 [ 469.159064][T19707] bpf_prog_load+0x735/0x1930 [ 469.159102][T19707] ? __pfx_bpf_prog_load+0x10/0x10 [ 469.159147][T19707] ? bpf_lsm_bpf+0x9/0x20 [ 469.159161][T19707] ? security_bpf+0x7e/0x300 [ 469.159182][T19707] __sys_bpf+0x5f1/0x860 [ 469.159204][T19707] ? __pfx___sys_bpf+0x10/0x10 [ 469.159234][T19707] ? ksys_write+0x22a/0x250 [ 469.159252][T19707] ? __pfx_ksys_write+0x10/0x10 [ 469.159264][T19707] ? rcu_is_watching+0x15/0xb0 [ 469.159293][T19707] __x64_sys_bpf+0x7c/0x90 [ 469.159313][T19707] do_syscall_64+0xfa/0x3b0 [ 469.159328][T19707] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.159348][T19707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.159363][T19707] ? clear_bhb_loop+0x60/0xb0 [ 469.159382][T19707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.159398][T19707] RIP: 0033:0x7fc79e78e929 [ 469.159414][T19707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.159428][T19707] RSP: 002b:00007fc79f68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.159445][T19707] RAX: ffffffffffffffda RBX: 00007fc79e9b5fa0 RCX: 00007fc79e78e929 [ 469.159458][T19707] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 469.159470][T19707] RBP: 00007fc79f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 469.159480][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.159490][T19707] R13: 0000000000000000 R14: 00007fc79e9b5fa0 R15: 00007ffc961b52d8 [ 469.159515][T19707] [ 469.160334][T19707] Mem-Info: [ 469.175098][T14714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.182778][T19707] active_anon:5857 inactive_anon:0 isolated_anon:0 [ 469.182778][T19707] active_file:1661 inactive_file:40030 isolated_file:0 [ 469.182778][T19707] unevictable:768 dirty:93 writeback:0 [ 469.182778][T19707] slab_reclaimable:11252 slab_unreclaimable:111329 [ 469.182778][T19707] mapped:40738 shmem:1367 pagetables:1241 [ 469.182778][T19707] sec_pagetables:0 bounce:0 [ 469.182778][T19707] kernel_misc_reclaimable:0 [ 469.182778][T19707] free:1292712 free_pcp:11561 free_cma:0 [ 469.203597][T14714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.210015][T19707] Node 0 active_anon:23428kB inactive_anon:0kB active_file:6644kB inactive_file:159920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162952kB dirty:372kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13840kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.556001][T19707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.603108][T19707] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.651728][T19707] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 469.664529][T19707] Node 0 DMA32 free:1248092kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23784kB inactive_anon:0kB active_file:6644kB inactive_file:158088kB unevictable:1536kB writepending:372kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:28404kB local_pcp:15880kB free_cma:0kB [ 469.690215][T14708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.700171][T19707] lowmem_reserve[]: 0 0 1 1 1 [ 469.709927][T19707] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 469.739410][T14708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.810517][T19707] lowmem_reserve[]: 0 0 0 0 0 [ 469.815719][T19707] Node 1 Normal free:3905960kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:8448kB free_cma:0kB [ 469.854258][ T5853] Bluetooth: hci4: command tx timeout [ 469.855936][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.902777][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.973156][T19707] lowmem_reserve[]: 0 0 0 0 0 [ 469.977936][T19707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.009335][T19727] x_tables: duplicate underflow at hook 3 [ 470.025704][T19707] Node 0 DMA32: 511*4kB (UME) 444*8kB (UME) 202*16kB (UM) 41*32kB (ME) 87*64kB (UM) 43*128kB (UM) 32*256kB (UM) 3*512kB (M) 2*1024kB (U) 5*2048kB (UM) 294*4096kB (M) = 1247452kB [ 470.060841][T19707] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 470.102616][T19707] Node 1 Normal: 204*4kB (U) 45*8kB (UME) 35*16kB (UME) 86*32kB (UME) 37*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 950*4096kB (M) = 3905992kB [ 470.129971][T19707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.140989][T19707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.200454][T19707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.225502][T19707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.244210][T19707] 43053 total pagecache pages [ 470.252829][T19707] 0 pages in swap cache [ 470.253669][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.262729][T19707] Free swap = 124996kB [ 470.269154][T19707] Total swap = 124996kB [ 470.272968][T19732] netlink: 'syz.3.4757': attribute type 4 has an invalid length. [ 470.286521][T19707] 2097051 pages RAM [ 470.296841][T19707] 0 pages HighMem/MovableOnly [ 470.306955][T19707] 424690 pages reserved [ 470.309826][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.311105][T19707] 0 pages cma reserved [ 470.612214][T14727] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.775027][T14727] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.937562][T14727] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.091883][T14727] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.236477][T19551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.293515][T19551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.358699][T19551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.387794][T19750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.452345][T19551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.627826][T14727] bridge_slave_1: left allmulticast mode [ 471.642861][T14727] bridge_slave_1: left promiscuous mode [ 471.649770][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.670583][T14727] bridge_slave_0: left allmulticast mode [ 471.680644][T14727] bridge_slave_0: left promiscuous mode [ 471.689440][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.782305][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.795510][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.806995][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.815985][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.824296][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.914983][ T5853] Bluetooth: hci4: command tx timeout [ 472.039130][T14727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.050014][T14727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.059873][T14727] bond0 (unregistering): Released all slaves [ 472.279408][T19551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.590484][T19551] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.718301][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.725490][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.831981][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.839260][T14726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.248170][T19551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.314913][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.326523][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.337199][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.355189][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.364364][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.638035][T14727] hsr_slave_0: left promiscuous mode [ 473.649106][T14727] hsr_slave_1: left promiscuous mode [ 473.668424][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.682203][T14727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.707638][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.717145][T14727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.789908][T14727] veth1_macvtap: left promiscuous mode [ 473.798336][T14727] veth0_macvtap: left promiscuous mode [ 473.809103][T14727] veth1_vlan: left promiscuous mode [ 473.817655][T14727] veth0_vlan: left promiscuous mode [ 473.829550][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4768'. [ 473.843597][T19806] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4768'. [ 473.914560][ T5853] Bluetooth: hci0: command tx timeout [ 474.314282][T14727] team0 (unregistering): Port device team_slave_1 removed [ 474.357576][T14727] team0 (unregistering): Port device team_slave_0 removed [ 474.748511][T19805] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.4768'. [ 474.787526][T19762] chnl_net:caif_netlink_parms(): no params data found [ 474.896446][T19814] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4770'. [ 475.433636][ T5853] Bluetooth: hci5: command tx timeout [ 475.474239][T19835] block nbd6: NBD_DISCONNECT [ 475.515490][T19838] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 475.541110][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.563070][T19762] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.570296][T19762] bridge_slave_0: entered allmulticast mode [ 475.591068][T19762] bridge_slave_0: entered promiscuous mode [ 475.610743][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.625848][T19762] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.642943][T19762] bridge_slave_1: entered allmulticast mode [ 475.659515][T19762] bridge_slave_1: entered promiscuous mode [ 475.788990][T19551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.901579][T19762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.918337][T19849] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 475.992775][ T5853] Bluetooth: hci0: command tx timeout [ 476.001042][T19762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.096022][T19849] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 476.108155][T19762] team0: Port device team_slave_0 added [ 476.146704][T19762] team0: Port device team_slave_1 added [ 476.296614][T19762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.305426][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.333425][T19762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.448520][T19762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.465540][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.500027][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4783'. [ 476.527251][T19762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.655700][T14727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.739832][T19886] FAULT_INJECTION: forcing a failure. [ 476.739832][T19886] name failslab, interval 1, probability 0, space 0, times 0 [ 476.757871][T19886] CPU: 1 UID: 0 PID: 19886 Comm: syz.6.4789 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 476.757903][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.757914][T19886] Call Trace: [ 476.757923][T19886] [ 476.757931][T19886] dump_stack_lvl+0x189/0x250 [ 476.757961][T19886] ? __pfx____ratelimit+0x10/0x10 [ 476.757991][T19886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.758015][T19886] ? __pfx__printk+0x10/0x10 [ 476.758040][T19886] ? __pfx___might_resched+0x10/0x10 [ 476.758069][T19886] should_fail_ex+0x414/0x560 [ 476.758096][T19886] should_failslab+0xa8/0x100 [ 476.758116][T19886] __kmalloc_noprof+0xcb/0x4f0 [ 476.758132][T19886] ? nf_tables_newset+0x132b/0x2530 [ 476.758152][T19886] ? nla_strdup+0x9d/0x140 [ 476.758172][T19886] ? trace_kmalloc+0x1f/0xd0 [ 476.758192][T19886] nla_strdup+0x9d/0x140 [ 476.758212][T19886] ? nft_rhash_estimate+0x8f/0xa0 [ 476.758233][T19886] nf_tables_newset+0x136a/0x2530 [ 476.758268][T19886] ? __pfx_nf_tables_newset+0x10/0x10 [ 476.758314][T19886] ? __nla_parse+0x40/0x60 [ 476.758341][T19886] nfnetlink_rcv+0x1132/0x2520 [ 476.758400][T19886] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 476.758441][T19886] ? ref_tracker_free+0x63a/0x7d0 [ 476.758495][T19886] ? __netlink_deliver_tap+0x807/0x850 [ 476.758526][T19886] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.758545][T19886] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.758571][T19886] netlink_unicast+0x758/0x8d0 [ 476.758601][T19886] netlink_sendmsg+0x805/0xb30 [ 476.758632][T19886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.758655][T19886] ? aa_sock_msg_perm+0x94/0x160 [ 476.758678][T19886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.758699][T19886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.758719][T19886] __sock_sendmsg+0x219/0x270 [ 476.758747][T19886] ____sys_sendmsg+0x505/0x830 [ 476.758775][T19886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.758806][T19886] ? import_iovec+0x74/0xa0 [ 476.758828][T19886] ___sys_sendmsg+0x21f/0x2a0 [ 476.758852][T19886] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.758919][T19886] ? __fget_files+0x2a/0x420 [ 476.758936][T19886] ? __fget_files+0x3a0/0x420 [ 476.758967][T19886] __x64_sys_sendmsg+0x19b/0x260 [ 476.758991][T19886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.759021][T19886] ? __pfx_ksys_write+0x10/0x10 [ 476.759035][T19886] ? rcu_is_watching+0x15/0xb0 [ 476.759064][T19886] ? do_syscall_64+0xbe/0x3b0 [ 476.759085][T19886] do_syscall_64+0xfa/0x3b0 [ 476.759100][T19886] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.759123][T19886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.759141][T19886] ? clear_bhb_loop+0x60/0xb0 [ 476.759162][T19886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.759179][T19886] RIP: 0033:0x7fc79e78e929 [ 476.759195][T19886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.759210][T19886] RSP: 002b:00007fc79f68d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.759230][T19886] RAX: ffffffffffffffda RBX: 00007fc79e9b5fa0 RCX: 00007fc79e78e929 [ 476.759244][T19886] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 476.759255][T19886] RBP: 00007fc79f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 476.759267][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.759278][T19886] R13: 0000000000000000 R14: 00007fc79e9b5fa0 R15: 00007ffc961b52d8 [ 476.759308][T19886] [ 477.235155][T14727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.256501][T19762] hsr_slave_0: entered promiscuous mode [ 477.263185][T19762] hsr_slave_1: entered promiscuous mode [ 477.269528][T19762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.277509][T19762] Cannot create hsr debugfs directory [ 477.474060][T14727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.512769][ T5853] Bluetooth: hci5: command tx timeout [ 477.636228][T14727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.698137][T19794] chnl_net:caif_netlink_parms(): no params data found [ 477.731320][T19551] veth0_vlan: entered promiscuous mode [ 477.990438][T19551] veth1_vlan: entered promiscuous mode [ 478.075071][ T5853] Bluetooth: hci0: command tx timeout [ 478.086516][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4797'. [ 478.236239][T19794] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.251310][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.269445][T19794] bridge_slave_0: entered allmulticast mode [ 478.278790][T19794] bridge_slave_0: entered promiscuous mode [ 478.446503][T19794] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.460537][T19794] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.470600][T19794] bridge_slave_1: entered allmulticast mode [ 478.491580][T19794] bridge_slave_1: entered promiscuous mode [ 478.501403][T19938] FAULT_INJECTION: forcing a failure. [ 478.501403][T19938] name failslab, interval 1, probability 0, space 0, times 0 [ 478.549601][T19938] CPU: 0 UID: 0 PID: 19938 Comm: syz.6.4801 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 478.549627][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.549639][T19938] Call Trace: [ 478.549647][T19938] [ 478.549655][T19938] dump_stack_lvl+0x189/0x250 [ 478.549684][T19938] ? __pfx____ratelimit+0x10/0x10 [ 478.549709][T19938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.549733][T19938] ? __pfx__printk+0x10/0x10 [ 478.549758][T19938] ? __pfx___might_resched+0x10/0x10 [ 478.549779][T19938] ? fs_reclaim_acquire+0x7d/0x100 [ 478.549802][T19938] should_fail_ex+0x414/0x560 [ 478.549829][T19938] should_failslab+0xa8/0x100 [ 478.549851][T19938] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 478.549869][T19938] ? kasprintf+0xd4/0x120 [ 478.549893][T19938] kvasprintf+0xdc/0x190 [ 478.549909][T19938] ? __kmalloc_noprof+0x27a/0x4f0 [ 478.549924][T19938] ? nla_strdup+0x9d/0x140 [ 478.549943][T19938] ? nf_tables_newset+0x136a/0x2530 [ 478.549967][T19938] ? __pfx_kvasprintf+0x10/0x10 [ 478.549983][T19938] ? ____sys_sendmsg+0x505/0x830 [ 478.550004][T19938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.550041][T19938] kasprintf+0xd4/0x120 [ 478.550065][T19938] ? __pfx_kasprintf+0x10/0x10 [ 478.550098][T19938] nf_tables_set_alloc_name+0x109/0x720 [ 478.550124][T19938] ? rcu_is_watching+0x15/0xb0 [ 478.550149][T19938] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 478.550166][T19938] ? nla_strdup+0xb8/0x140 [ 478.550199][T19938] nf_tables_newset+0x138b/0x2530 [ 478.550235][T19938] ? __pfx_nf_tables_newset+0x10/0x10 [ 478.550281][T19938] ? __nla_parse+0x40/0x60 [ 478.550309][T19938] nfnetlink_rcv+0x1132/0x2520 [ 478.550369][T19938] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 478.550411][T19938] ? ref_tracker_free+0x63a/0x7d0 [ 478.550466][T19938] ? __netlink_deliver_tap+0x807/0x850 [ 478.550496][T19938] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.550515][T19938] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.550542][T19938] netlink_unicast+0x758/0x8d0 [ 478.550573][T19938] netlink_sendmsg+0x805/0xb30 [ 478.550603][T19938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.550627][T19938] ? aa_sock_msg_perm+0x94/0x160 [ 478.550651][T19938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.550672][T19938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.550693][T19938] __sock_sendmsg+0x219/0x270 [ 478.550721][T19938] ____sys_sendmsg+0x505/0x830 [ 478.550748][T19938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.550783][T19938] ? import_iovec+0x74/0xa0 [ 478.550805][T19938] ___sys_sendmsg+0x21f/0x2a0 [ 478.550829][T19938] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.550890][T19938] ? __fget_files+0x2a/0x420 [ 478.550908][T19938] ? __fget_files+0x3a0/0x420 [ 478.550939][T19938] __x64_sys_sendmsg+0x19b/0x260 [ 478.550963][T19938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.550994][T19938] ? __pfx_ksys_write+0x10/0x10 [ 478.551009][T19938] ? rcu_is_watching+0x15/0xb0 [ 478.551043][T19938] ? do_syscall_64+0xbe/0x3b0 [ 478.551065][T19938] do_syscall_64+0xfa/0x3b0 [ 478.551080][T19938] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.551103][T19938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.551120][T19938] ? clear_bhb_loop+0x60/0xb0 [ 478.551141][T19938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.551158][T19938] RIP: 0033:0x7fc79e78e929 [ 478.551174][T19938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.551189][T19938] RSP: 002b:00007fc79f68d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.551208][T19938] RAX: ffffffffffffffda RBX: 00007fc79e9b5fa0 RCX: 00007fc79e78e929 [ 478.551222][T19938] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 478.551234][T19938] RBP: 00007fc79f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 478.551245][T19938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.551256][T19938] R13: 0000000000000000 R14: 00007fc79e9b5fa0 R15: 00007ffc961b52d8 [ 478.551287][T19938] [ 479.063728][T19947] trusted_key: syz.3.4804 sent an empty control message without MSG_MORE. [ 479.219715][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4804'. [ 479.264442][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4806'. [ 479.281520][T19794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.372512][T19947] vxcan3: entered allmulticast mode [ 479.378433][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4808'. [ 479.456203][T19794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.580128][T14727] bridge_slave_1: left allmulticast mode [ 479.593754][ T5853] Bluetooth: hci5: command tx timeout [ 479.595543][T14727] bridge_slave_1: left promiscuous mode [ 479.622117][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.638774][T19967] netlink: 'syz.6.4810': attribute type 2 has an invalid length. [ 479.651154][T14727] bridge_slave_0: left allmulticast mode [ 479.658321][T14727] bridge_slave_0: left promiscuous mode [ 479.671038][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.997245][T14727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.009868][T14727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.019936][T14727] bond0 (unregistering): Released all slaves [ 480.033538][T19551] veth0_macvtap: entered promiscuous mode [ 480.132545][T19794] team0: Port device team_slave_0 added [ 480.152887][ T5853] Bluetooth: hci0: command tx timeout [ 480.215249][T19551] veth1_macvtap: entered promiscuous mode [ 480.273763][T19794] team0: Port device team_slave_1 added [ 480.312345][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4814'. [ 480.410711][T19551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.418124][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4817'. [ 480.429165][T19794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.442790][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.477725][T19794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.491667][T19794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.499004][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.525193][T19794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.539404][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4818'. [ 480.552074][T19982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.586267][T19551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.620005][T19983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.942512][T14727] hsr_slave_0: left promiscuous mode [ 480.960563][T14727] hsr_slave_1: left promiscuous mode [ 480.973513][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.980921][T14727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.004421][T14727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.012033][T14727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.053694][T14727] veth1_macvtap: left promiscuous mode [ 481.059262][T14727] veth0_macvtap: left promiscuous mode [ 481.066766][T14727] veth1_vlan: left promiscuous mode [ 481.072107][T14727] veth0_vlan: left promiscuous mode [ 481.579018][T14727] team0 (unregistering): Port device team_slave_1 removed [ 481.618601][T14727] team0 (unregistering): Port device team_slave_0 removed [ 481.682836][ T5853] Bluetooth: hci5: command tx timeout [ 481.969904][T19551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.979018][T19551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.990971][T19551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.999805][T19551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.012051][T19762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.024310][T19762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.041332][T19794] hsr_slave_0: entered promiscuous mode [ 482.053344][T19794] hsr_slave_1: entered promiscuous mode [ 482.059358][T19794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.067488][T19794] Cannot create hsr debugfs directory [ 482.131316][T19762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 482.174153][T19762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.325974][T20014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.685103][T20022] xt_recent: Unsupported userspace flags (00000061) [ 482.770403][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.781395][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.840579][T14717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.850734][T14717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.863933][T20024] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.985720][T19762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.066754][T19762] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.209356][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.216539][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.251824][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.259017][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.340765][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4828'. [ 483.869550][T14714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.939202][T19762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.127502][T14714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.282192][T14714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.329498][T19794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.345103][T19794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.358836][T19794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.435538][T14714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.470644][T19794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.549334][T19762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.691373][T14714] bridge_slave_1: left allmulticast mode [ 484.701935][T14714] bridge_slave_1: left promiscuous mode [ 484.710051][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.729559][T14714] bridge_slave_0: left allmulticast mode [ 484.753913][T14714] bridge_slave_0: left promiscuous mode [ 484.764923][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.234404][T20096] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.371551][T14714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.401004][T14714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.433968][T14714] bond0 (unregistering): Released all slaves [ 485.446168][T20106] xt_l2tp: v2 doesn't support IP mode [ 485.631010][T19794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.669898][T19794] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.767408][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.774616][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.815031][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.822192][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.846662][T20118] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4835'. [ 485.876767][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.889379][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.912998][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.935619][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.955670][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.976052][T20116] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 486.514043][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4838'. [ 486.531371][T19762] veth0_vlan: entered promiscuous mode [ 486.551973][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4838'. [ 486.745284][T19762] veth1_vlan: entered promiscuous mode [ 486.768906][T19794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.868606][T19762] veth0_macvtap: entered promiscuous mode [ 487.015264][T14714] hsr_slave_0: left promiscuous mode [ 487.044926][T14714] hsr_slave_1: left promiscuous mode [ 487.075075][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.082520][T14714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.193397][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.200834][T14714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.287588][T20158] netlink: 'syz.6.4841': attribute type 9 has an invalid length. [ 487.321285][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4841'. [ 487.338251][T14714] veth1_macvtap: left promiscuous mode [ 487.369297][T14714] veth0_macvtap: left promiscuous mode [ 487.375591][T14714] veth1_vlan: left promiscuous mode [ 487.380960][T14714] veth0_vlan: left promiscuous mode [ 488.073132][ T5853] Bluetooth: hci4: command tx timeout [ 488.221152][T20190] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.462145][T14714] team0 (unregistering): Port device team_slave_1 removed [ 488.531529][T14714] team0 (unregistering): Port device team_slave_0 removed [ 488.956337][T19762] veth1_macvtap: entered promiscuous mode [ 489.075288][T19762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.178651][T19762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.213757][T19794] veth0_vlan: entered promiscuous mode [ 489.280116][T19762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.296533][T19762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.310079][T19762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.328148][T19762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.479001][T19794] veth1_vlan: entered promiscuous mode [ 489.684557][T20119] chnl_net:caif_netlink_parms(): no params data found [ 489.820127][T19794] veth0_macvtap: entered promiscuous mode [ 489.891878][T19794] veth1_macvtap: entered promiscuous mode [ 490.155075][ T5853] Bluetooth: hci4: command tx timeout [ 490.168566][T20119] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.184578][T20119] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.214228][T20119] bridge_slave_0: entered allmulticast mode [ 490.233834][T20119] bridge_slave_0: entered promiscuous mode [ 490.261251][T19794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.286734][T14727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.319062][T20119] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.322720][T14727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.334602][T20119] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.341924][T20119] bridge_slave_1: entered allmulticast mode [ 490.351767][T20119] bridge_slave_1: entered promiscuous mode [ 490.382548][T19794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.476672][T19794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.489001][T19794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.500715][T19794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.515997][T19794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.554967][T20119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.568246][T20258] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 490.582148][T14714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.600237][T20119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.610073][T14714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.760938][T20119] team0: Port device team_slave_0 added [ 490.820841][T20119] team0: Port device team_slave_1 added [ 490.919473][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4864'. [ 490.951676][T20119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.988966][T20119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.015647][T20119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.158695][T20119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.180798][T20119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.239764][T20119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.518371][T14722] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.636789][T20119] hsr_slave_0: entered promiscuous mode [ 491.644053][T20119] hsr_slave_1: entered promiscuous mode [ 491.650366][T20119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.658337][T20119] Cannot create hsr debugfs directory [ 491.709355][T14722] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.760223][T14726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.773958][T14726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.828443][T14722] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.889699][T14722] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.936151][T14727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.971499][T14727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.237872][ T5853] Bluetooth: hci4: command tx timeout [ 492.369200][T14722] bridge_slave_1: left allmulticast mode [ 492.376511][T14722] bridge_slave_1: left promiscuous mode [ 492.382269][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.393253][T14722] bridge_slave_0: left allmulticast mode [ 492.399725][T14722] bridge_slave_0: left promiscuous mode [ 492.406151][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.054527][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.071963][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.084799][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.106505][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.116198][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.124816][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.146677][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.160632][T14722] bond0 (unregistering): Released all slaves [ 493.589131][T20119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.624546][T20119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.652831][T20119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.684408][T20119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.828386][T20119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.906117][T20119] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.043299][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.050455][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.177111][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.184309][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.315172][ T5853] Bluetooth: hci4: command tx timeout [ 494.598096][T14722] hsr_slave_0: left promiscuous mode [ 494.626346][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4877'. [ 494.635337][T14722] hsr_slave_1: left promiscuous mode [ 494.636012][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.672886][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.690510][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.691455][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.707491][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.712538][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.731372][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.750659][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.759296][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.816460][T14722] veth1_macvtap: left promiscuous mode [ 494.821998][T14722] veth0_macvtap: left promiscuous mode [ 494.838570][T14722] veth1_vlan: left promiscuous mode [ 494.846231][T14722] veth0_vlan: left promiscuous mode [ 495.196064][ T5837] Bluetooth: hci0: command tx timeout [ 495.667219][T14722] team0 (unregistering): Port device team_slave_1 removed [ 495.729345][T14722] team0 (unregistering): Port device team_slave_0 removed [ 496.767891][T20317] chnl_net:caif_netlink_parms(): no params data found [ 496.788439][T20425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 496.812565][ T5837] Bluetooth: hci5: command tx timeout [ 497.236480][T20432] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 497.274750][ T5837] Bluetooth: hci0: command tx timeout [ 497.291780][T20119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.331636][T20317] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.353924][T20317] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.368610][T20317] bridge_slave_0: entered allmulticast mode [ 497.376559][T20317] bridge_slave_0: entered promiscuous mode [ 497.398419][T20317] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.405837][T20317] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.414361][T20317] bridge_slave_1: entered allmulticast mode [ 497.426710][T20317] bridge_slave_1: entered promiscuous mode [ 497.640912][T20317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.690570][T20458] IPVS: length: 138 != 8 [ 497.699304][T20317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.781231][T20461] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4894'. [ 497.794840][T20461] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4894'. [ 497.822935][T20461] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4894'. [ 497.832242][T20458] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 497.937013][T20317] team0: Port device team_slave_0 added [ 498.001379][T20317] team0: Port device team_slave_1 added [ 498.111287][T14722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.214373][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 498.274376][T14722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.290766][T20479] netlink: 'syz.3.4899': attribute type 1 has an invalid length. [ 498.298876][T20479] netlink: 'syz.3.4899': attribute type 2 has an invalid length. [ 498.309267][T20317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.337993][T20317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.364688][T20317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.436261][T14722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.452094][T20317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.460264][T20317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.498664][T20317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.570936][T14722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.595588][T20119] veth0_vlan: entered promiscuous mode [ 498.669972][T20317] hsr_slave_0: entered promiscuous mode [ 498.676692][T20317] hsr_slave_1: entered promiscuous mode [ 498.682715][T20317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.690270][T20317] Cannot create hsr debugfs directory [ 498.854262][T20119] veth1_vlan: entered promiscuous mode [ 498.873054][ T5837] Bluetooth: hci5: command tx timeout [ 498.898897][T20499] netlink: 'syz.3.4906': attribute type 1 has an invalid length. [ 498.908418][T20499] netlink: 'syz.3.4906': attribute type 3 has an invalid length. [ 498.919778][T20499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4906'. [ 498.935545][T20359] chnl_net:caif_netlink_parms(): no params data found [ 498.965046][T20499] NCSI netlink: No device for ifindex 0 [ 499.149655][T14722] bridge_slave_1: left allmulticast mode [ 499.163275][T14722] bridge_slave_1: left promiscuous mode [ 499.174807][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.203447][T14722] bridge_slave_0: left allmulticast mode [ 499.211762][T14722] bridge_slave_0: left promiscuous mode [ 499.217773][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.353334][ T5837] Bluetooth: hci0: command tx timeout [ 499.681256][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.699208][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.717011][T14722] bond0 (unregistering): Released all slaves [ 499.909339][T20359] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.917069][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.926159][T20359] bridge_slave_0: entered allmulticast mode [ 499.934273][T20359] bridge_slave_0: entered promiscuous mode [ 499.984129][T20119] veth0_macvtap: entered promiscuous mode [ 500.037444][T20359] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.047820][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.058589][T20359] bridge_slave_1: entered allmulticast mode [ 500.074895][T20359] bridge_slave_1: entered promiscuous mode [ 500.134963][T20535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4914'. [ 500.144130][T20535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4914'. [ 500.179895][T20535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4914'. [ 500.539467][T20119] veth1_macvtap: entered promiscuous mode [ 500.559427][T20359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.579608][T20359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.807751][T20359] team0: Port device team_slave_0 added [ 500.866828][T20359] team0: Port device team_slave_1 added [ 500.908423][T20119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.937433][T20119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.954101][ T5837] Bluetooth: hci5: command tx timeout [ 501.281924][T14722] hsr_slave_0: left promiscuous mode [ 501.290301][T14722] hsr_slave_1: left promiscuous mode [ 501.296522][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.309922][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.317867][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.325358][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.349050][T14722] veth1_macvtap: left promiscuous mode [ 501.355587][T14722] veth0_macvtap: left promiscuous mode [ 501.363020][T14722] veth1_vlan: left promiscuous mode [ 501.371433][T14722] veth0_vlan: left promiscuous mode [ 501.434113][ T5837] Bluetooth: hci0: command tx timeout [ 501.862009][T14722] team0 (unregistering): Port device team_slave_1 removed [ 501.903919][T14722] team0 (unregistering): Port device team_slave_0 removed [ 502.275814][T20359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.283179][T20359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.309612][T20359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.333020][T20119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.341761][T20119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.353012][T20119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.361809][T20119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.403499][T20359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.417123][T20359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.471315][T20359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.620688][T20359] hsr_slave_0: entered promiscuous mode [ 502.636352][T20359] hsr_slave_1: entered promiscuous mode [ 502.642568][T20359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.655635][T20359] Cannot create hsr debugfs directory [ 502.909824][T20317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.939934][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.958220][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.982757][T20317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.033234][ T5837] Bluetooth: hci5: command tx timeout [ 503.050772][T20317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 503.063521][T20317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.116290][T14727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.151868][T14727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.349720][T20587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.437117][T20579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.518751][T20579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.551848][T20317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.589399][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4929'. [ 503.695171][T14722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.821544][T14722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.851749][T20317] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.884215][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.891352][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.948076][T14722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.964849][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.971973][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.046816][T20359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 504.058300][T20359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.098026][T14722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.130663][T20359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.146042][T20359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.343946][T14722] bridge_slave_1: left allmulticast mode [ 504.349621][T14722] bridge_slave_1: left promiscuous mode [ 504.360860][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.380088][T14722] bridge_slave_0: left allmulticast mode [ 504.386848][T14722] bridge_slave_0: left promiscuous mode [ 504.392606][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.692122][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.703819][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.715077][T14722] bond0 (unregistering): Released all slaves [ 504.768219][T20317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.898295][T20359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.058792][T20359] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.107542][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.114749][T14720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.177858][T14727] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.185062][T14727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.589413][T20317] veth0_vlan: entered promiscuous mode [ 505.650259][T20317] veth1_vlan: entered promiscuous mode [ 505.780681][T20317] veth0_macvtap: entered promiscuous mode [ 505.844572][T20317] veth1_macvtap: entered promiscuous mode [ 505.901658][T14722] hsr_slave_0: left promiscuous mode [ 505.918847][T14722] hsr_slave_1: left promiscuous mode [ 505.944764][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.961961][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.963142][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.981130][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.989185][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.998936][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.006953][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.024231][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.032099][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.071933][T14722] veth1_macvtap: left promiscuous mode [ 506.085820][T14722] veth0_macvtap: left promiscuous mode [ 506.092518][T14722] veth1_vlan: left promiscuous mode [ 506.115573][T14722] veth0_vlan: left promiscuous mode [ 506.564841][T14722] team0 (unregistering): Port device team_slave_1 removed [ 506.626749][T14722] team0 (unregistering): Port device team_slave_0 removed [ 506.731432][T20651] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4944'. [ 507.090253][T20359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.187925][T20317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.242333][T20657] netlink: 'syz.3.4946': attribute type 4 has an invalid length. [ 507.252252][T20317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.327862][T20317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.356241][T20317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.378445][T20317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.399012][T20317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.461574][T20359] veth0_vlan: entered promiscuous mode [ 507.611063][T20359] veth1_vlan: entered promiscuous mode [ 507.819261][T14717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.835387][T14717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.896849][T14717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.927593][T14717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.945281][T20359] veth0_macvtap: entered promiscuous mode [ 507.971540][T20359] veth1_macvtap: entered promiscuous mode [ 508.073016][ T5853] Bluetooth: hci4: command tx timeout [ 508.121171][T20359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.149972][T20359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.159595][T20638] chnl_net:caif_netlink_parms(): no params data found [ 508.188008][T20359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.198801][T20359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.210020][T20359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.219950][T20359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.319643][T14722] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.521926][T14722] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.541480][T20638] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.551020][T20638] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.559385][T20638] bridge_slave_0: entered allmulticast mode [ 508.566707][T20638] bridge_slave_0: entered promiscuous mode [ 508.579512][T20638] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.586790][T20638] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.594229][T20638] bridge_slave_1: entered allmulticast mode [ 508.602111][T20638] bridge_slave_1: entered promiscuous mode [ 508.645336][T14722] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.716466][T20638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.737488][T20638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.764676][T14722] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.828266][T20638] team0: Port device team_slave_0 added [ 508.838997][T20638] team0: Port device team_slave_1 added [ 508.887362][T14720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.896989][T20638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.907528][T14720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.915450][T20638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.944924][T20638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.968925][T20638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.979307][T20638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.009594][T20638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.084595][T14717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.093752][T14717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.199110][T20638] hsr_slave_0: entered promiscuous mode [ 509.213756][T20638] hsr_slave_1: entered promiscuous mode [ 509.219774][T20638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.234195][T20638] Cannot create hsr debugfs directory [ 509.243926][T14722] bridge_slave_1: left allmulticast mode [ 509.249570][T14722] bridge_slave_1: left promiscuous mode [ 509.260655][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.274928][T14722] bridge_slave_0: left allmulticast mode [ 509.280569][T14722] bridge_slave_0: left promiscuous mode [ 509.299127][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.375059][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4953'. [ 509.732562][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.755149][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.764308][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.774688][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.782307][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.898414][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.909946][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.920443][T14722] bond0 (unregistering): Released all slaves [ 510.152955][ T5837] Bluetooth: hci4: command tx timeout [ 510.219427][T20701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4957'. [ 510.988622][T14722] hsr_slave_0: left promiscuous mode [ 510.999435][T14722] hsr_slave_1: left promiscuous mode [ 511.010914][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.019392][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.027805][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.037767][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.065100][T14722] veth1_macvtap: left promiscuous mode [ 511.070687][T14722] veth0_macvtap: left promiscuous mode [ 511.077277][T14722] veth1_vlan: left promiscuous mode [ 511.082689][T14722] veth0_vlan: left promiscuous mode [ 511.561932][T14722] team0 (unregistering): Port device team_slave_1 removed [ 511.620923][T14722] team0 (unregistering): Port device team_slave_0 removed [ 511.834383][ T5837] Bluetooth: hci0: command tx timeout [ 511.924730][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4959'. [ 512.144367][T20727] netlink: 'syz.6.4961': attribute type 9 has an invalid length. [ 512.244812][ T5837] Bluetooth: hci4: command tx timeout [ 512.286116][T20729] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 512.356949][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 512.374827][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 512.395817][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 512.418520][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 512.439524][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 512.647489][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4964'. [ 512.672861][T20738] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 512.970981][T20698] chnl_net:caif_netlink_parms(): no params data found [ 513.081183][T20754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4966'. [ 513.329238][T20763] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4968'. [ 513.343446][T20763] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4968'. [ 513.352406][T20763] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4968'. [ 513.573044][T20774] sctp: [Deprecated]: syz.6.4970 (pid 20774) Use of int in maxseg socket option. [ 513.573044][T20774] Use struct sctp_assoc_value instead [ 513.597818][T20638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.629732][T20698] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.650046][T20698] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.672411][T20698] bridge_slave_0: entered allmulticast mode [ 513.697391][T20698] bridge_slave_0: entered promiscuous mode [ 513.724894][T20779] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0 [ 513.726019][T20638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.747752][T20698] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.781207][T20698] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.794695][T20698] bridge_slave_1: entered allmulticast mode [ 513.804900][T20698] bridge_slave_1: entered promiscuous mode [ 513.872165][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 513.890952][T20638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.909781][T20782] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 513.910513][T20698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.923006][ T5837] Bluetooth: hci0: command tx timeout [ 513.946044][T20698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.025516][T14722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.052978][T20638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.149952][T14722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.234158][T20698] team0: Port device team_slave_0 added [ 514.269305][T20698] team0: Port device team_slave_1 added [ 514.314039][ T5837] Bluetooth: hci4: command tx timeout [ 514.361644][T14722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.417444][T20809] netlink: 'syz.3.4980': attribute type 4 has an invalid length. [ 514.418515][T20698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.432195][T20698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.459540][T20698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.470376][T20811] netlink: 'syz.3.4980': attribute type 4 has an invalid length. [ 514.478230][ T5837] Bluetooth: hci5: command tx timeout [ 514.485899][T20698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.492989][T20698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.519326][T20811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4980'. [ 514.528787][T20698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.597352][T14722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.624874][T20811] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.729717][T20817] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4982'. [ 514.790543][T20698] hsr_slave_0: entered promiscuous mode [ 514.826254][T20698] hsr_slave_1: entered promiscuous mode [ 514.853513][T20698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.869602][T20698] Cannot create hsr debugfs directory [ 514.908968][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4984'. [ 515.092310][T20730] chnl_net:caif_netlink_parms(): no params data found [ 515.558979][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4990'. [ 515.660735][T20730] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.672874][T20730] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.680267][T20730] bridge_slave_0: entered allmulticast mode [ 515.695149][T20730] bridge_slave_0: entered promiscuous mode [ 515.738771][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.764283][T20730] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.771418][T20730] bridge_slave_1: entered allmulticast mode [ 515.788429][T20730] bridge_slave_1: entered promiscuous mode [ 515.799836][T14722] bridge_slave_1: left allmulticast mode [ 515.806546][T14722] bridge_slave_1: left promiscuous mode [ 515.813300][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.836774][T14722] bridge_slave_0: left allmulticast mode [ 515.853739][T14722] bridge_slave_0: left promiscuous mode [ 515.859553][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.992891][ T5837] Bluetooth: hci0: command tx timeout [ 516.109052][T20861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4992'. [ 516.119182][T20861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4992'. [ 516.274191][T14722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.287444][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.301754][T14722] bond0 (unregistering): Released all slaves [ 516.312769][T20867] netlink: 'syz.6.4995': attribute type 4 has an invalid length. [ 516.480895][T20873] netlink: 'syz.6.4997': attribute type 9 has an invalid length. [ 516.554992][ T5837] Bluetooth: hci5: command tx timeout [ 516.628110][T20730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.719327][T20730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.858717][T20730] team0: Port device team_slave_0 added [ 516.873322][T20889] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5002'. [ 516.946404][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5003'. [ 516.955886][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5003'. [ 516.976325][T20730] team0: Port device team_slave_1 added [ 517.140494][T20638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.175901][T20730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.192663][T20730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.241735][T20730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.255141][T20730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.262103][T20730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.289346][T20730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.579095][T20730] hsr_slave_0: entered promiscuous mode [ 517.585874][T20730] hsr_slave_1: entered promiscuous mode [ 517.591999][T20730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.599611][T20730] Cannot create hsr debugfs directory [ 517.631314][T20638] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.686616][T14722] hsr_slave_0: left promiscuous mode [ 517.693328][T14722] hsr_slave_1: left promiscuous mode [ 517.699456][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.708561][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.716905][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.726374][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.758850][T14722] veth1_macvtap: left promiscuous mode [ 517.771505][T14722] veth0_macvtap: left promiscuous mode [ 517.779007][T14722] veth1_vlan: left promiscuous mode [ 517.790480][T14722] veth0_vlan: left promiscuous mode [ 518.075342][ T5837] Bluetooth: hci0: command tx timeout [ 518.605776][T14722] team0 (unregistering): Port device team_slave_1 removed [ 518.638060][ T5837] Bluetooth: hci5: command tx timeout [ 518.658236][T14722] team0 (unregistering): Port device team_slave_0 removed [ 519.171727][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.178916][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.358471][T20938] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 519.368305][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.375479][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.430695][T20698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.490100][T20698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.517870][T20949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5014'. [ 519.548912][T20698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.583262][T20698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 519.910406][T20971] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.5018'. [ 519.921169][T20971] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.5018'. [ 520.326389][T20698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.395372][T20698] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.624394][T20995] veth5: entered promiscuous mode [ 520.639838][T20995] veth5: entered allmulticast mode [ 520.667759][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.674952][T14727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.714054][ T5837] Bluetooth: hci5: command tx timeout [ 520.714565][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.726645][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.881930][T20638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.929103][T21005] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 521.099718][T20730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.137285][T20730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.166313][T21014] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5027'. [ 521.166784][T20730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.207993][T20730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 521.316024][T20638] veth0_vlan: entered promiscuous mode [ 521.396296][T20638] veth1_vlan: entered promiscuous mode [ 521.417006][T20698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.595414][T20638] veth0_macvtap: entered promiscuous mode [ 521.676712][T20638] veth1_macvtap: entered promiscuous mode [ 521.726709][T20730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.740621][T21040] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 521.824489][T20730] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.855250][T20638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.896477][T20638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.934684][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.941841][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.021749][T20638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.042781][T20638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.060330][T20638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.079487][T20638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.115830][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.123035][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.276966][T21059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 522.511079][T14720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.529765][T20698] veth0_vlan: entered promiscuous mode [ 522.537737][T14720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.595122][T21067] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5038'. [ 522.616826][T20698] veth1_vlan: entered promiscuous mode [ 522.733272][T14714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.741134][T14714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.814487][T20698] veth0_macvtap: entered promiscuous mode [ 522.837973][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.849571][T21074] C: entered promiscuous mode [ 522.852967][T21078] netlink: 252 bytes leftover after parsing attributes in process `syz.6.5040'. [ 522.863909][T21074] tunl0: entered promiscuous mode [ 522.869127][T21074] gre0: entered promiscuous mode [ 522.890419][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.896572][T21074] gretap0: entered promiscuous mode [ 522.910022][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.916945][T21074] erspan0: entered promiscuous mode [ 522.925412][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.931347][T21074] erspan0: left allmulticast mode [ 522.937261][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.943747][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.949832][T21074] ip_vti0: entered promiscuous mode [ 522.956039][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.972283][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 522.978691][T21074] ip6_vti0: entered promiscuous mode [ 523.000944][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 523.007371][T21074] sit0: entered promiscuous mode [ 523.017602][T21077] xt_TCPMSS: Only works on TCP SYN packets [ 523.030959][T21074] ip6tnl0: entered promiscuous mode [ 523.070788][T21074] ip6gre0: entered promiscuous mode [ 523.076721][T21074] ip6gretap0: entered promiscuous mode [ 523.082450][T21074] bond0: entered promiscuous mode [ 523.090731][T21074] bond_slave_0: entered promiscuous mode [ 523.097043][T21074] bond_slave_1: entered promiscuous mode [ 523.103568][T21074] bond1: entered promiscuous mode [ 523.113130][T21074] team0: entered promiscuous mode [ 523.118671][T21074] team_slave_0: entered promiscuous mode [ 523.139794][T21074] team_slave_1: entered promiscuous mode [ 523.156651][T21074] dummy0: entered promiscuous mode [ 523.189018][T21074] nlmon0: entered promiscuous mode [ 523.195734][T21074] caif0: entered promiscuous mode [ 523.203929][T20698] veth1_macvtap: entered promiscuous mode [ 523.392336][T20698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.547941][T14714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.589269][T20698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.651876][T20698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.671942][T20698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.692555][T20698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.712951][T20698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.823934][T14714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.880148][T20730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.917689][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 523.940555][T14714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.039407][T14714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.162524][T20730] veth0_vlan: entered promiscuous mode [ 524.201121][T14727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.231411][T14727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.251323][T20730] veth1_vlan: entered promiscuous mode [ 524.301897][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.339864][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.374350][T20730] veth0_macvtap: entered promiscuous mode [ 524.392046][T20730] veth1_macvtap: entered promiscuous mode [ 524.477689][T20730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.490224][T20730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.595376][T20730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.606212][T20730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.616678][T20730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.626052][T20730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.690788][T14714] bridge_slave_1: left allmulticast mode [ 524.700546][T14714] bridge_slave_1: left promiscuous mode [ 524.730874][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.753526][T14714] bridge_slave_0: left allmulticast mode [ 524.768958][T14714] bridge_slave_0: left promiscuous mode [ 524.782380][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.466587][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.476309][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.487744][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 525.507833][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.516777][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 525.604303][T14714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.616716][T14714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.627513][T14714] bond0 (unregistering): Released all slaves [ 525.893886][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.901736][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.109885][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.122493][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.357663][T21148] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 526.724432][T21162] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5050'. [ 526.829799][T14714] hsr_slave_0: left promiscuous mode [ 526.857432][T14714] hsr_slave_1: left promiscuous mode [ 526.893573][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.924261][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.934474][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.943694][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.951997][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.963128][T14714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.982931][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.991438][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.022894][T14714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.061498][T14714] veth1_macvtap: left promiscuous mode [ 527.071393][T14714] veth0_macvtap: left promiscuous mode [ 527.079657][T14714] veth1_vlan: left promiscuous mode [ 527.089773][T14714] veth0_vlan: left promiscuous mode [ 527.564197][T14714] team0 (unregistering): Port device team_slave_1 removed [ 527.596165][ T5853] Bluetooth: hci0: command tx timeout [ 527.615451][T14714] team0 (unregistering): Port device team_slave_0 removed [ 528.319399][T21133] chnl_net:caif_netlink_parms(): no params data found [ 528.669665][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5051'. [ 528.711911][T21133] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.740228][T21133] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.762455][T21133] bridge_slave_0: entered allmulticast mode [ 528.782560][T21133] bridge_slave_0: entered promiscuous mode [ 528.815221][T21133] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.822375][T21133] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.842979][T21133] bridge_slave_1: entered allmulticast mode [ 528.860427][T21133] bridge_slave_1: entered promiscuous mode [ 529.042358][ T5853] Bluetooth: hci4: command tx timeout [ 529.066761][T21133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.121201][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.132046][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.141488][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.155233][T21133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.165387][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.181550][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.310476][T21205] netlink: 'syz.6.5057': attribute type 9 has an invalid length. [ 529.389380][T14717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.409001][T21208] netlink: 'syz.6.5058': attribute type 4 has an invalid length. [ 529.434924][T21133] team0: Port device team_slave_0 added [ 529.454274][T21133] team0: Port device team_slave_1 added [ 529.491288][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5060'. [ 529.503905][T21212] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 529.508122][T14717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.598321][T21215] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5061'. [ 529.661733][T14717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.673348][ T5853] Bluetooth: hci0: command tx timeout [ 529.683810][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5060'. [ 529.700300][T21133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.732889][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.796389][T21133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.806622][T21222] netlink: 'syz.3.5062': attribute type 1 has an invalid length. [ 529.845884][T21222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.869364][T14717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.887093][T21211] syzkaller1: entered promiscuous mode [ 529.892561][T21211] syzkaller1: entered allmulticast mode [ 529.900874][T21133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.915242][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.944919][T21133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.975456][T21222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.993123][T21222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.012134][T21222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.023178][T21222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.044872][T21222] bond2: (slave geneve2): making interface the new active one [ 530.078789][T21222] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 530.104755][T21225] bond2: entered promiscuous mode [ 530.109880][T21225] geneve2: entered promiscuous mode [ 530.458515][T21133] hsr_slave_0: entered promiscuous mode [ 530.470074][T21133] hsr_slave_1: entered promiscuous mode [ 530.479745][T21133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.490896][T21133] Cannot create hsr debugfs directory [ 530.579446][T21236] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5064'. [ 530.992335][T21257] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 531.054403][T14717] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.113617][ T5853] Bluetooth: hci4: command tx timeout [ 531.159126][T21164] chnl_net:caif_netlink_parms(): no params data found [ 531.177706][T21263] ip6erspan1: entered promiscuous mode [ 531.221832][T14717] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.257932][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5070'. [ 531.275278][ T5853] Bluetooth: hci5: command tx timeout [ 531.410584][T21270] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 531.492920][T14717] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.502820][T21273] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5072'. [ 531.517718][T21273] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5072'. [ 531.675046][T14717] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.722180][T21200] chnl_net:caif_netlink_parms(): no params data found [ 531.752832][ T5853] Bluetooth: hci0: command tx timeout [ 532.206399][T21299] dvmrp1: entered allmulticast mode [ 532.214993][T21164] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.240589][T21164] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.268852][T21164] bridge_slave_0: entered allmulticast mode [ 532.290670][T21164] bridge_slave_0: entered promiscuous mode [ 532.321690][T21164] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.340269][T21164] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.348182][T21164] bridge_slave_1: entered allmulticast mode [ 532.364024][T21164] bridge_slave_1: entered promiscuous mode [ 532.376802][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5082'. [ 532.419167][T21302] dvmrp1: left allmulticast mode [ 532.594831][T21318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5084'. [ 532.604767][T21318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5084'. [ 532.629971][T21315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 532.737446][T21322] netlink: 'syz.3.5086': attribute type 4 has an invalid length. [ 532.783167][T21324] netlink: 'syz.6.5085': attribute type 9 has an invalid length. [ 532.813597][T21164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.844402][T21164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.853896][T21200] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.861042][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.868716][T21200] bridge_slave_0: entered allmulticast mode [ 532.878205][T21200] bridge_slave_0: entered promiscuous mode [ 532.888112][T21200] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.895617][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.903267][T21200] bridge_slave_1: entered allmulticast mode [ 532.910969][T21200] bridge_slave_1: entered promiscuous mode [ 533.016698][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5089'. [ 533.048609][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5090'. [ 533.071501][T21200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.097227][T21164] team0: Port device team_slave_0 added [ 533.110765][T21164] team0: Port device team_slave_1 added [ 533.157328][T21164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.164953][T21164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.191806][T21164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.212342][ T5853] Bluetooth: hci4: command tx timeout [ 533.219887][T21164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.234794][T21164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.268879][T21164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.284438][T21200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.353985][ T5853] Bluetooth: hci5: command tx timeout [ 533.427831][T21200] team0: Port device team_slave_0 added [ 533.449474][T14717] bridge_slave_1: left allmulticast mode [ 533.455867][T14717] bridge_slave_1: left promiscuous mode [ 533.461862][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.474300][T14717] bridge_slave_0: left allmulticast mode [ 533.480099][T14717] bridge_slave_0: left promiscuous mode [ 533.486785][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.506286][T14717] bridge_slave_1: left allmulticast mode [ 533.511952][T14717] bridge_slave_1: left promiscuous mode [ 533.520009][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.531106][T14717] bridge_slave_0: left allmulticast mode [ 533.538179][T14717] bridge_slave_0: left promiscuous mode [ 533.545022][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.836835][ T5853] Bluetooth: hci0: command tx timeout [ 533.910100][T14717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.921531][T14717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.933493][T14717] bond0 (unregistering): Released all slaves [ 534.275587][T14717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.286575][T14717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.299351][T14717] bond0 (unregistering): Released all slaves [ 534.315856][T21200] team0: Port device team_slave_1 added [ 534.331590][T21351] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 534.378472][T21346] dvmrp1: entered allmulticast mode [ 534.384475][T21133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.422576][T21347] dvmrp1: left allmulticast mode [ 534.535195][T21133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.560893][T21353] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5096'. [ 534.573560][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5096'. [ 534.638569][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5097'. [ 534.647612][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5097'. [ 534.674584][T21164] hsr_slave_0: entered promiscuous mode [ 534.688867][T21164] hsr_slave_1: entered promiscuous mode [ 534.697216][T21164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.705977][T21164] Cannot create hsr debugfs directory [ 534.713534][T21133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.725447][T21133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 534.769087][T21200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.777962][T21200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.816748][T21200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.919527][T21200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.927249][T21367] netlink: 'syz.6.5098': attribute type 4 has an invalid length. [ 534.936229][T21200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.966863][T21200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.969946][T21361] netlink: 'syz.6.5098': attribute type 4 has an invalid length. [ 535.072295][T21369] nbd: must specify a device to reconfigure [ 535.214033][T21200] hsr_slave_0: entered promiscuous mode [ 535.220747][T21200] hsr_slave_1: entered promiscuous mode [ 535.230133][T21200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.252745][T21200] Cannot create hsr debugfs directory [ 535.274605][ T5853] Bluetooth: hci4: command tx timeout [ 535.433100][ T5853] Bluetooth: hci5: command tx timeout [ 535.484339][T21388] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5104'. [ 535.571603][T21389] tipc: Can't bind to reserved service type 2 [ 535.744592][T21391] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.913808][ T31] INFO: task syz.0.4325:17681 blocked for more than 143 seconds. [ 535.923983][ T31] Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 [ 535.944679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.956455][T21399] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 535.968862][ T31] task:syz.0.4325 state:D stack:25080 pid:17681 tgid:17680 ppid:5834 task_flags:0x400140 flags:0x00004004 [ 535.989854][ T31] Call Trace: [ 536.005852][ T31] [ 536.031512][ T31] __schedule+0x16f5/0x4d00 [ 536.049748][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.062666][ T31] ? schedule+0x165/0x360 [ 536.071590][ T31] ? __pfx___schedule+0x10/0x10 [ 536.087304][ T31] ? schedule+0x91/0x360 [ 536.095524][ T31] schedule+0x165/0x360 [ 536.099799][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.110329][ T31] __mutex_lock+0x724/0xe80 [ 536.118518][ T31] ? __mutex_lock+0x51b/0xe80 [ 536.123819][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 536.132802][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.138118][ T31] ? __asan_memset+0x22/0x50 [ 536.143316][ T31] ? ____sys_sendmsg+0x505/0x830 [ 536.148379][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 536.153785][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 536.159019][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 536.165007][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 536.170859][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 536.180616][ T31] ? __nla_parse+0x40/0x60 [ 536.185285][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 536.191730][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 536.197822][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 536.204255][ T31] ? bpf_lsm_capable+0x9/0x20 [ 536.209045][ T31] ? security_capable+0x7e/0x2e0 [ 536.214531][ T31] genl_rcv_msg+0x60e/0x790 [ 536.219172][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.224772][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 536.231067][ T31] netlink_rcv_skb+0x205/0x470 [ 536.239383][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.246234][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.251664][ T31] ? down_read+0x1ad/0x2e0 [ 536.262885][ T31] genl_rcv+0x28/0x40 [ 536.268392][ T31] netlink_unicast+0x758/0x8d0 [ 536.279464][ T31] netlink_sendmsg+0x805/0xb30 [ 536.286139][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.291557][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 536.304563][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.309965][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.321609][ T31] __sock_sendmsg+0x219/0x270 [ 536.330981][ T31] ____sys_sendmsg+0x505/0x830 [ 536.341632][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.349073][ T31] ? import_iovec+0x74/0xa0 [ 536.359353][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 536.366541][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.372054][ T31] ? __fget_files+0x2a/0x420 [ 536.382288][ T31] ? __fget_files+0x3a0/0x420 [ 536.390844][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 536.403994][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.411250][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.416684][ T31] ? do_syscall_64+0xbe/0x3b0 [ 536.421480][ T31] do_syscall_64+0xfa/0x3b0 [ 536.426685][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.431999][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.438817][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.443997][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.449999][ T31] RIP: 0033:0x7f4a29f8e929 [ 536.454955][ T31] RSP: 002b:00007f4a2aebe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.464256][ T31] RAX: ffffffffffffffda RBX: 00007f4a2a1b5fa0 RCX: 00007f4a29f8e929 [ 536.472344][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 536.481088][ T31] RBP: 00007f4a2a010b39 R08: 0000000000000000 R09: 0000000000000000 [ 536.489543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.498189][ T31] R13: 0000000000000000 R14: 00007f4a2a1b5fa0 R15: 00007fff3ed3b458 [ 536.506631][ T31] [ 536.512266][ T31] INFO: task syz.0.4325:17684 blocked for more than 143 seconds. [ 536.532313][ T31] Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 [ 536.540454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.560900][ T31] task:syz.0.4325 state:D stack:27176 pid:17684 tgid:17680 ppid:5834 task_flags:0x400140 flags:0x00004004 [ 536.582581][ T31] Call Trace: [ 536.586346][ T31] [ 536.589396][ T31] __schedule+0x16f5/0x4d00 [ 536.601616][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.608299][ T31] ? schedule+0x165/0x360 [ 536.614216][ T31] ? __pfx___schedule+0x10/0x10 [ 536.619189][ T31] ? schedule+0x91/0x360 [ 536.623900][ T31] schedule+0x165/0x360 [ 536.628176][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.634084][ T31] __mutex_lock+0x724/0xe80 [ 536.638655][ T31] ? __mutex_lock+0x51b/0xe80 [ 536.643785][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 536.649793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.655329][ T31] ? __asan_memset+0x22/0x50 [ 536.659960][ T31] ? ____sys_sendmsg+0x505/0x830 [ 536.665012][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 536.669979][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 536.675190][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 536.681008][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 536.686934][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 536.693179][ T31] ? __nla_parse+0x40/0x60 [ 536.697690][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 536.704334][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 536.709910][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 536.716322][ T31] ? bpf_lsm_capable+0x9/0x20 [ 536.721010][ T31] ? security_capable+0x7e/0x2e0 [ 536.726120][ T31] genl_rcv_msg+0x60e/0x790 [ 536.730789][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.735908][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 536.742171][ T31] netlink_rcv_skb+0x205/0x470 [ 536.747221][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.752248][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.757610][ T31] ? down_read+0x1ad/0x2e0 [ 536.762148][ T31] genl_rcv+0x28/0x40 [ 536.766230][ T31] netlink_unicast+0x758/0x8d0 [ 536.771024][ T31] netlink_sendmsg+0x805/0xb30 [ 536.776072][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.781395][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 536.786490][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.791952][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.797476][ T31] __sock_sendmsg+0x219/0x270 [ 536.802168][ T31] ____sys_sendmsg+0x505/0x830 [ 536.806995][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.812405][ T31] ? import_iovec+0x74/0xa0 [ 536.817049][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 536.821831][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.827180][ T31] ? __fget_files+0x2a/0x420 [ 536.831799][ T31] ? __fget_files+0x3a0/0x420 [ 536.836719][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 536.841766][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.847303][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.852179][ T31] ? do_syscall_64+0xbe/0x3b0 [ 536.856920][ T31] do_syscall_64+0xfa/0x3b0 [ 536.861437][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.866862][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.873190][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.877884][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.883854][ T31] RIP: 0033:0x7f4a29f8e929 [ 536.888381][ T31] RSP: 002b:00007f4a2ae7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.896862][ T31] RAX: ffffffffffffffda RBX: 00007f4a2a1b6160 RCX: 00007f4a29f8e929 [ 536.905699][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 536.913809][ T31] RBP: 00007f4a2a010b39 R08: 0000000000000000 R09: 0000000000000000 [ 536.921930][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.930070][ T31] R13: 0000000000000000 R14: 00007f4a2a1b6160 R15: 00007fff3ed3b458 [ 536.938202][ T31] [ 536.948825][ T31] [ 536.948825][ T31] Showing all locks held in the system: [ 536.957270][ T31] 1 lock held by khungtaskd/31: [ 536.962186][T14717] hsr_slave_0: left promiscuous mode [ 536.991077][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 537.005825][ T31] 2 locks held by kworker/u8:7/4332: [ 537.011541][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 537.021843][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 537.033665][ T31] 2 locks held by dhcpcd/5498: [ 537.038439][ T31] #0: ffffffff8f4f4c48 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790 [ 537.047854][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 537.057353][ T31] 2 locks held by getty/5597: [ 537.062386][ T31] #0: ffff88803509a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.073299][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 537.083526][ T31] 3 locks held by kworker/u8:10/14714: [ 537.089018][ T31] #0: ffff88802fe4d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.100707][ T31] #1: ffffc90002e97bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.113931][ T31] #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 537.123636][ T31] 5 locks held by kworker/u8:11/14717: [ 537.129150][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.140133][ T31] #1: ffffc90002e47bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.150804][ T31] #2: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 537.160216][ T31] #3: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 537.170279][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 537.181272][ T31] 3 locks held by kworker/u8:12/14720: [ 537.186788][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.201080][ T31] #1: ffffc9001af07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.212201][ T31] #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 537.221309][ T31] 5 locks held by kworker/u8:13/14722: [ 537.226800][ T31] 2 locks held by syz.4.3515/14793: [ 537.232091][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 537.240483][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 537.250741][ T31] 2 locks held by syz.0.4325/17681: [ 537.256066][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 537.264308][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 537.274664][ T31] 2 locks held by syz.0.4325/17684: [ 537.279861][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 537.288114][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 537.298373][ T31] 1 lock held by syz-executor/21133: [ 537.303775][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 537.313294][ T31] 7 locks held by syz-executor/21164: [ 537.318661][ T31] #0: ffff8880352ca428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 537.327584][ T31] #1: ffff8880563a6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 537.337407][ T31] #2: ffff888143b6c4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 537.347606][ T31] #3: ffffffff8edaafe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 537.358143][ T31] #4: ffff88802f8ef0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 537.368900][ T31] #5: ffff88802f8ec250 (&devlink->lock_key#36){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 537.379171][ T31] #6: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 537.388767][ T31] 2 locks held by syz-executor/21200: [ 537.394275][ T31] #0: ffffffff8fa14ee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 537.403918][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 537.413142][T14717] hsr_slave_1: left promiscuous mode [ 537.418995][T14717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.427660][ T31] [ 537.429988][ T31] ============================================= [ 537.429988][ T31] [ 537.438784][T14717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.446674][ T31] NMI backtrace for cpu 1 [ 537.446689][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 537.446710][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.446721][ T31] Call Trace: [ 537.446730][ T31] [ 537.446738][ T31] dump_stack_lvl+0x189/0x250 [ 537.446764][ T31] ? __wake_up_klogd+0xd9/0x110 [ 537.446786][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.446810][ T31] ? __pfx__printk+0x10/0x10 [ 537.446841][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 537.446866][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 537.446884][ T31] ? _printk+0xcf/0x120 [ 537.446906][ T31] ? __pfx__printk+0x10/0x10 [ 537.446927][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.446951][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 537.446974][ T31] watchdog+0xfee/0x1030 [ 537.446998][ T31] ? watchdog+0x1de/0x1030 [ 537.447027][ T31] kthread+0x70e/0x8a0 [ 537.447049][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.447068][ T31] ? __pfx_kthread+0x10/0x10 [ 537.447088][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.447116][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.447137][ T31] ? __pfx_kthread+0x10/0x10 [ 537.447157][ T31] ret_from_fork+0x3f9/0x770 [ 537.447183][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 537.447211][ T31] ? __switch_to_asm+0x39/0x70 [ 537.447227][ T31] ? __switch_to_asm+0x33/0x70 [ 537.447243][ T31] ? __pfx_kthread+0x10/0x10 [ 537.447263][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.447296][ T31] [ 537.447303][ T31] Sending NMI from CPU 1 to CPUs 0: [ 537.532766][ T5853] Bluetooth: hci5: command tx timeout [ 537.534797][ C0] NMI backtrace for cpu 0 [ 537.534815][ C0] CPU: 0 UID: 0 PID: 5853 Comm: kworker/u9:7 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 537.534834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.534845][ C0] Workqueue: hci5 hci_cmd_timeout [ 537.534864][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 537.534883][ C0] Code: 1f 79 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0c 9d dc fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 537.534897][ C0] RSP: 0018:ffffc900040ff310 EFLAGS: 00000002 [ 537.534910][ C0] RAX: 000000000000005d RBX: 000000000000005d RCX: 0000000000000000 [ 537.534920][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 537.534931][ C0] RBP: 00000000000003f8 R08: ffff8880247f8237 R09: 1ffff110048ff046 [ 537.534942][ C0] R10: dffffc0000000000 R11: ffffffff85473cf0 R12: dffffc0000000000 [ 537.534954][ C0] R13: ffffffff99ac38ce R14: ffffffff99dc8780 R15: 0000000000000000 [ 537.534965][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 537.534978][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.534989][ C0] CR2: 00007fc79e981178 CR3: 00000000754e0000 CR4: 00000000003526f0 [ 537.535002][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.535012][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.535022][ C0] Call Trace: [ 537.535029][ C0] [ 537.535038][ C0] serial8250_console_write+0x140d/0x1ba0 [ 537.535062][ C0] ? __lock_acquire+0xab9/0xd20 [ 537.535082][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 537.535099][ C0] ? console_flush_all+0x13a/0xc40 [ 537.535116][ C0] ? console_flush_all+0x13a/0xc40 [ 537.535135][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 537.535151][ C0] ? console_flush_all+0x13a/0xc40 [ 537.535166][ C0] ? console_flush_all+0x13a/0xc40 [ 537.535183][ C0] console_flush_all+0x728/0xc40 [ 537.535200][ C0] ? console_flush_all+0x13a/0xc40 [ 537.535218][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 537.535240][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 537.535259][ C0] console_unlock+0xc4/0x270 [ 537.535275][ C0] ? __pfx_console_unlock+0x10/0x10 [ 537.535292][ C0] ? vprintk_emit+0x444/0x7a0 [ 537.535305][ C0] ? vprintk_emit+0x444/0x7a0 [ 537.535320][ C0] vprintk_emit+0x5b7/0x7a0 [ 537.535333][ C0] ? vprintk_emit+0x444/0x7a0 [ 537.535354][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 537.535372][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 537.535392][ C0] ? sched_clock_cpu+0x74/0x430 [ 537.535414][ C0] _printk+0xcf/0x120 [ 537.535432][ C0] ? __pfx__printk+0x10/0x10 [ 537.535448][ C0] ? do_raw_spin_lock+0x121/0x290 [ 537.535463][ C0] ? look_up_lock_class+0x74/0x170 [ 537.535486][ C0] bt_err+0x10b/0x160 [ 537.535503][ C0] ? __lock_acquire+0xab9/0xd20 [ 537.535523][ C0] ? __pfx_bt_err+0x10/0x10 [ 537.535547][ C0] hci_cmd_timeout+0xff/0x1e0 [ 537.535561][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 537.535581][ C0] process_scheduled_works+0xae1/0x17b0 [ 537.535614][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.535642][ C0] worker_thread+0x8a0/0xda0 [ 537.535671][ C0] kthread+0x70e/0x8a0 [ 537.535689][ C0] ? __pfx_worker_thread+0x10/0x10 [ 537.535708][ C0] ? __pfx_kthread+0x10/0x10 [ 537.535725][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.535744][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.535761][ C0] ? __pfx_kthread+0x10/0x10 [ 537.535778][ C0] ret_from_fork+0x3f9/0x770 [ 537.535799][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 537.535820][ C0] ? __switch_to_asm+0x39/0x70 [ 537.535834][ C0] ? __switch_to_asm+0x33/0x70 [ 537.535848][ C0] ? __pfx_kthread+0x10/0x10 [ 537.535864][ C0] ret_from_fork_asm+0x1a/0x30 [ 537.535887][ C0] [ 537.539123][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 537.539139][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 537.539161][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.539172][ T31] Call Trace: [ 537.539181][ T31] [ 537.539189][ T31] dump_stack_lvl+0x99/0x250 [ 537.539217][ T31] ? __asan_memcpy+0x40/0x70 [ 537.539240][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.539264][ T31] ? __pfx__printk+0x10/0x10 [ 537.539294][ T31] panic+0x2db/0x790 [ 537.539323][ T31] ? __pfx_panic+0x10/0x10 [ 537.539346][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 537.539374][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 537.539396][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 537.539425][ T31] watchdog+0x102d/0x1030 [ 537.539449][ T31] ? watchdog+0x1de/0x1030 [ 537.539478][ T31] kthread+0x70e/0x8a0 [ 537.539501][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.539521][ T31] ? __pfx_kthread+0x10/0x10 [ 537.539542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.539564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.539585][ T31] ? __pfx_kthread+0x10/0x10 [ 537.539606][ T31] ret_from_fork+0x3f9/0x770 [ 537.539630][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 537.539658][ T31] ? __switch_to_asm+0x39/0x70 [ 537.539674][ T31] ? __switch_to_asm+0x33/0x70 [ 537.539690][ T31] ? __pfx_kthread+0x10/0x10 [ 537.539714][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.539747][ T31] [ 537.543259][ T31] Kernel Offset: disabled